Privacy Policy

1. Introduction — Commitment to Privacy and Data Protection

At isiccards.com (“we”, “us”, “our”), your privacy is of paramount importance. We are committed to ensuring that all personal data collected from our users is handled with integrity, responsibility, and in strict compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This Privacy Policy outlines how we collect, use, safeguard, and share your personal data, as well as your rights concerning such data.

2. Scope of the Policy and Data Controller Role

This Privacy Policy applies to all users who access or interact with isiccards.com, including visitors, account holders, and customers. As the data controller for personal data collected through this website, we determine the purposes and means of processing your information and are responsible for ensuring such processing complies with applicable legislation.

If you have any concerns or queries regarding the processing of your personal data, you may contact us at [email protected].

3. Categories of Data Processed

We process the following categories of personal data in the course of operating our website and delivering our services:

– Usage Data: Information automatically collected when you visit our site, such as your IP address, browser type and version, time zone, device identifiers, session duration, navigation paths, and pages visited.

– Account Data: Data provided when you create an account, including your full name, residential or delivery address, email address, and telephone number.

– Profile Data: Information related to your preferences, service usage, purchases, behavioral patterns, and interactions with our site.

– Communication Data: Content and metadata related to communications with us, including customer service inquiries, feedback, and histories of prior correspondence.

– Technical Data: Device type, operating system, network type, system configurations, language settings, and diagnostic logs that help maintain site performance.

– Transaction Data: Information pertaining to purchases, payment methods, billing addresses, delivery details, and order history.

– Preference Data: Your marketing preferences, opt-in consents, and information regarding the categories of products or services you are most interested in.

4. Legal Bases for Processing

We process your personal data on the following lawful bases recognized under GDPR:

– Performance of a contract: When you make purchases, register for services, or engage in legal agreements with us.

– Legitimate interests: To enhance user experience, safeguard our platform, prevent fraud, and conduct analytics.

– Consent: When you voluntarily provide personal data for marketing purposes, newsletter subscriptions, or cookies requiring active choice.

– Legal obligation: Where processing is necessary to comply with our legal responsibilities, such as tax or regulatory obligations.

5. Your Rights

Under the GDPR and CCPA (where applicable), you have several rights regarding your personal data:

– Right of Access: You may request confirmation as to whether we process your personal information and receive a copy of such data.

– Right of Rectification: You can request that inaccurate or incomplete data be corrected or supplemented.

– Right to Erasure (“Right to be Forgotten”): You may ask for your personal data to be deleted when it is no longer needed or if you withdraw consent.

– Right to Restriction of Processing: You can restrict the processing of your data under certain conditions, such as pending verification of accuracy.

– Right to Data Portability: You may request to receive your personal data in a structured, commonly used, and machine-readable format for transmission to another controller.

To exercise any of your rights, please email us at [email protected] with a clear request and proof of identity.

6. Security Measures

We implement and maintain robust technical and organizational security protocols to protect your personal data against unauthorized access, accidental loss, disclosure, or destruction. These include:

– Encryption of sensitive data in transit and at rest

– Role-based access controls and secure authentication protocols

– Regular backups and continuity planning

– Employee training in data protection responsibilities and procedures

7. International Transfers

Where your data is transferred outside of the European Economic Area (EEA), including but not limited to hosting, service provision, or support functions, we ensure that such transfers are conducted under legally adequate safeguards. These include the use of Standard Contractual Clauses approved by the European Commission, and where applicable, compliance with local data protection laws in the destination region.

8. Data Retention

We retain personal data only as long as is necessary for the purposes outlined in this Privacy Policy or to fulfill our legal and contractual obligations. Specifically:

– Account and Profile Data: Retained while your account remains active and up to 6 years after closure to defend legal claims.

– Transaction Data: Retained for 7 years for financial auditing and legal compliance.

– Communication Data: Retained for 3 years from the date of the last correspondence.

– Technical and Usage Data: Retained up to 24 months for performance monitoring and analytics, then anonymized or deleted.

9. Cookie Policy

isiccards.com uses cookies and similar tracking technologies to enhance user experience, diagnose technical issues, and deliver relevant content. Cookies are classified into the following types:

– Essential Cookies: Required for core website functions such as secure login and shopping carts.

– Functional Cookies: Enable enhanced features like language preferences and user settings.

– Analytics Cookies: Collect anonymized data for measuring site performance and visitor behavior (e.g., page views, bounce rate).

– Performance Cookies: Help us test website features and user engagement to improve service delivery.

10. Cookie Management and Legal Compliance

Upon your first visit, we provide a cookie consent banner in compliance with GDPR and CCPA regulations. You have the option to accept or decline non-essential cookies. You may also modify your preferences at any time through our Cookie Settings page or via your browser settings.

We do not sell or lease your personal information in exchange for money. However, some cookies may qualify as “sharing” under CCPA definitions. Where applicable, we provide an opt-out mechanism for such sharing.

11. Special Protections for Children Under 13

Our services are not directed toward children under the age of 13. We do not knowingly collect, maintain, or process personal data from individuals under this age. If we become aware that a child has provided us with personal data without verified parental consent, we will take appropriate steps to delete such data. If you believe we have collected data from a child under the age of 13, please notify us at [email protected].

12. Policy Updates and User Notifications

We may modify this Privacy Policy from time to time to reflect changes in legal requirements, technology, or business operations. Any substantial updates will be posted to isiccards.com and, where necessary, you will be notified directly via email or website pop-up. We encourage you to review this policy regularly.

13. Contact

Should you have any questions about this Privacy Policy or wish to exercise your data protection rights, please reach out to us at:

Email: [email protected]
Website: https://www.isiccards.com

We are committed to full compliance with GDPR, CCPA, and other relevant regulations. Your privacy is our priority, and we invite you to contact us with any privacy-related questions or concerns.